We help IT Professionals succeed at work.

Exchange 2010 expried certificate

cobmo
cobmo asked
on
48 Views
Last Modified: 2015-12-02
I have an expired certificate on the Exchange server.  It overlapped with a more recent certificate I bought and added more servers to.  So I currently have a valid certificate for Exchange.  I need to delete the old one obviously.  When I delete it, will it impact any of my users that may be using it? or do they automatically transfer to the new certificate?  Do they get a certificate prompt?  
I guess I just want to know if deleting the expired cert will affect any users.
Comment
Watch Question

Will SzymkowskiSenior Solution Architect
CERTIFIED EXPERT
Most Valuable Expert 2015
Top Expert 2015

Commented:
I have a couple of questions...

- has the new certificate been installed on all of your CAS servers?
- if the above is true you still need to ENABLE the certificate and assign it services (use the below command)

Run this command on every CAS server that has the new certificate installed
Get-ExchangeCertificate | FL

Enable- ExchangeCertificate -ThumbPrint xxxxxxxxxxxxxxxxx -services "pop,imap,smtp,iis"

Open in new window


Click Y to accept the changes. This new certificate will now become the default and will be used for all of your virtural directories OWA/EAS etc.

You can then remove the other 3rd party SSL cert using the below command...
Remove-ExchangeCertificate -Thumbprint xxxxxxxxxxxxxxx

Open in new window


Press Y to confirm the changes.

Will.
cobmoIT Manager

Author

Commented:
I do not have a CAS server. Can I do it from the gui?
Will SzymkowskiSenior Solution Architect
CERTIFIED EXPERT
Most Valuable Expert 2015
Top Expert 2015

Commented:
I do not have a CAS server. Can I do it from the gui?

I am sure you do have an Exchange server that does have the CAS role. Do you have a single Exchange server? If you do then that server is likely holding all of the roles. In that case you will need to run the commands that i have illustrated above.

Will.
cobmoIT Manager

Author

Commented:
Also, the Exchange Certificates shows it as "The certificate is valid for Exchange server usage".  The other one just says "Expired".  When I log onto OWA, the certificate for me shows the newer certificate.  I don't know why I think the expired cert would still be used by a user.....
Senior Solution Architect
CERTIFIED EXPERT
Most Valuable Expert 2015
Top Expert 2015
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION
cobmoIT Manager

Author

Commented:
There is an Exchange self signed certificate that has expired and is self signed (true).  Do I leave that one alone?
Will SzymkowskiSenior Solution Architect
CERTIFIED EXPERT
Most Valuable Expert 2015
Top Expert 2015

Commented:
Self Signed Certs should not be removed. Only 3rd party SSL certs can be removed.

To renew a self-signed cert use New-ExchangeCertificate cmdlet.

Other than that you should be fine.

Will.

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions
Unlock the solution to this question.
Join our community and discover your potential

Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.